Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87a2b84a-2314-3b24-9f48-58e0d35f87f3.roa
File:                     87a2b84a-2314-3b24-9f48-58e0d35f87f3.roa (raw, json)
Hash identifier:          DUkc9HYA4EKAWGt46ue0vTwSsM4nr/GPFhDUCqg3aIk=
Subject key identifier:   D2:6C:84:8C:9F:41:42:85:C3:15:65:8E:ED:99:7D:4E:2F:D8:1D:8F
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584E0005FB9620E12372E0C64580
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87a2b84a-2314-3b24-9f48-58e0d35f87f3.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        136.22.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:fb:96:20:e1:23:72:e0:c6:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=0e5ba8b0-39a6-4fd5-a687-1ed81d9a1085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b1:b0:de:37:6d:72:bf:8a:d7:23:ca:21:c8:
                    73:15:fa:7f:ce:c1:ac:1a:c9:ee:b8:24:99:b6:ee:
                    85:42:93:69:a3:29:b0:4c:61:43:4d:2d:40:82:18:
                    c7:64:3f:a1:f4:7f:fa:b9:99:12:8f:ec:bb:db:ca:
                    ff:d3:e6:1c:19:0a:8c:3d:fd:7e:92:0a:c8:88:39:
                    b6:51:e5:80:74:6b:d0:a3:b0:2d:df:08:42:01:e4:
                    52:60:10:88:0d:cb:30:5a:c1:20:60:2c:99:2d:8c:
                    54:59:3f:29:2b:0f:3c:3f:66:9a:09:4b:6c:ff:be:
                    54:56:66:62:49:17:54:08:71:e9:ca:cd:0c:df:17:
                    07:b7:b8:66:a5:d7:52:11:48:74:06:eb:d5:83:2b:
                    2e:50:a0:15:4c:c6:cd:5e:c4:87:4e:08:c6:bf:6f:
                    3d:f0:b1:ca:70:99:ec:77:9b:e3:33:fb:d5:54:46:
                    34:5c:1e:fe:e1:f2:09:3a:88:22:81:07:ab:f4:fa:
                    e4:6b:a9:7b:af:23:56:61:7d:1f:03:85:cb:cc:11:
                    31:ca:4d:bb:62:85:92:37:c1:b0:13:9a:bb:70:d0:
                    b1:05:e5:ea:fb:9f:24:b2:75:ac:e1:a3:cf:77:ff:
                    1a:44:84:87:91:02:6c:a0:4c:19:97:8b:78:aa:b9:
                    8f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6C:84:8C:9F:41:42:85:C3:15:65:8E:ED:99:7D:4E:2F:D8:1D:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87a2b84a-2314-3b24-9f48-58e0d35f87f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:b4:15:24:7a:9d:e6:64:cb:6c:84:73:49:a1:5a:a2:22:4c:
         41:6b:51:31:e8:71:6f:fe:65:94:bd:61:cb:dd:78:51:d3:a0:
         72:e3:2b:e7:08:6a:8d:15:ef:32:f6:5a:b6:f2:66:60:8f:4e:
         a8:f3:79:c1:17:87:2c:35:ac:27:74:c3:84:d5:96:57:45:e3:
         f9:d9:ed:c2:79:ed:18:e6:d9:c8:3f:cb:2e:cf:8a:d5:fb:14:
         f2:5e:1a:93:3a:56:ed:6b:8f:0a:d4:1e:39:fb:eb:d4:a9:14:
         7d:31:b2:16:11:34:1e:cb:99:18:47:10:5d:ae:a2:61:8c:8d:
         dd:17:df:e8:2f:2b:8b:8a:6e:2d:a4:4a:8b:17:ec:68:e7:e4:
         d2:4b:54:51:7c:a9:f9:b5:ad:b9:60:9a:76:09:3e:bf:a0:8a:
         14:fc:1f:c1:76:19:91:b7:d1:3a:4f:a9:b7:4e:c0:53:2c:fa:
         53:bc:b7:23:c3:06:e6:b7:a5:4a:db:a4:5d:ea:eb:7e:c2:16:
         29:99:a1:25:5a:be:fd:93:d5:a3:84:fc:10:66:80:ed:3b:0a:
         f1:18:96:35:d0:41:ee:b0:8e:99:24:de:8f:7c:fc:5b:2d:78:
         4a:31:a2:44:ed:23:51:9b:61:91:42:00:94:3c:82:75:d5:9c:
         c7:7b:5d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:40:44 2026 by rpki-client